If I'm correct, all steps use plain HTTP connection.
I think it is quite possible that we setup a proxy server in the middle to intercept and replace these certain requests, and let other requests go through.
Using the proxy method, things needed are just the 3DS itself and a computer.